The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3677-2 advisory.

    USN-3677-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.10. This update provides the     corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 17.10 for Ubuntu 16.04     LTS.

    It was discovered that the netfilter subsystem of the Linux kernel did not properly validate ebtables     offsets. A local attacker could use this to cause a denial of service (system crash) or possibly execute     arbitrary code. (CVE-2018-1068)

    Wen Xu discovered that the ext4 filesystem implementation in the Linux kernel did not properly handle     corrupted meta data in some situations. An attacker could use this to specially craft an ext4 file system     that caused a denial of service (system crash) when mounted. (CVE-2018-1092)

    It was discovered that a NULL pointer dereference existed in the RDS (Reliable Datagram Sockets) protocol     implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system     crash). (CVE-2018-7492)

    It was discovered that the 802.11 software simulator implementation in the Linux kernel contained a memory     leak when handling certain error conditions. A local attacker could possibly use this to cause a denial of     service (memory exhaustion). (CVE-2018-8087)

    Eyal Itkin discovered that the USB displaylink video adapter driver in the Linux kernel did not properly     validate mmap offsets sent from userspace. A local attacker could use this to expose sensitive information     (kernel memory) or possibly execute arbitrary code. (CVE-2018-8781)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3677-2)

high Nessus Plugin ID 110479

Version 1.9